Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: Tre6HQq911mr3bGjXaq+kBq+IMzTOCjGVzQTY0+7Z7U=
Subject key identifier: 83:D4:91:C5:1D:87:C7:38:D4:4B:D7:4A:F1:B8:3A:98:DE:85:A2:53
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 01A08A8CE5B77D620C11CAAC775BD9050DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 09:01:24 +0000
Manifest this update: Thu 10 Sep 2026 09:01:24 +0000
Manifest next update: Fri 11 Sep 2026 09:01:24 +0000
Files and hashes: 1: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (hash: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w=)
2: O0z1dWysTLckLSWa-xjk4iWOyJo.roa (hash: xfK3oB04u+nOy6dQDoBykL7MzhjzL+9xzN4TDIDbuCg=)
3: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: FCX4xX/J4GBYFC8oJeQzUC9oXIet4IRIegfSVY2azts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:e5:b7:7d:62:0c:11:ca:ac:77:5b:d9:05:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Sep 10 09:01:24 2026 GMT
Not After : Sep 11 09:01:24 2026 GMT
Subject: CN=83d491c51d87c738d44bd74af1b83a98de85a253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:bf:89:1c:ca:e0:22:6a:df:55:ce:6e:af:
f2:6b:b0:00:e9:e8:c2:80:fd:ef:a0:50:c2:94:42:
08:36:07:9e:9a:40:fd:9c:10:17:b0:44:d1:c0:da:
d0:9a:21:08:7b:b6:d1:0d:55:3e:63:a5:2f:c1:8f:
83:eb:b3:f9:f7:68:4a:cc:6e:3e:9c:48:b3:76:2a:
9c:db:12:65:a8:34:0f:78:33:7b:91:dd:dc:6f:aa:
d6:3a:c2:a9:fb:6f:06:55:41:ee:13:da:f6:fb:0e:
2c:26:24:68:f0:70:08:fb:d1:85:20:56:62:54:53:
9c:5b:ba:b1:3e:ae:ed:c6:1f:75:44:ed:75:cf:f1:
35:ee:a8:1b:fe:88:4c:ac:8c:1a:d5:c7:df:dd:b9:
b3:17:e6:92:dc:be:ea:01:32:d5:00:14:8e:10:2e:
0d:1f:d6:f6:fc:63:1a:3b:49:a5:b1:3f:bd:35:00:
90:5f:d4:55:e1:61:60:47:9e:97:2c:d1:ad:5a:bd:
c2:8d:64:f1:7c:7b:6a:f1:e2:c6:29:07:ef:47:57:
12:85:00:1b:92:ae:4f:e4:28:a0:2f:02:0f:92:72:
5e:ba:b1:e9:0c:a1:77:bc:aa:5d:27:0b:2c:3c:c4:
7e:3d:c0:d0:c7:a2:ea:a5:5b:52:97:52:a4:31:cc:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D4:91:C5:1D:87:C7:38:D4:4B:D7:4A:F1:B8:3A:98:DE:85:A2:53
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d2:ed:fd:0a:6b:49:e9:ab:ba:ae:ba:f3:6b:5d:16:50:af:
04:9f:7c:86:29:d2:f1:69:37:2a:7b:66:30:ae:bf:ce:bd:32:
8e:78:54:8a:ef:e8:56:99:1e:2a:a3:80:21:13:48:f2:93:b5:
e9:df:8c:c3:0c:59:27:91:c3:13:db:d8:ca:6c:9a:27:cb:4d:
3a:cb:f5:7b:9f:a7:ce:a5:3d:80:fe:b8:a5:b7:65:2e:42:b8:
a6:46:09:34:d7:97:3c:73:96:78:8d:1f:aa:3c:d1:43:20:4b:
56:45:ec:dc:ab:e2:a5:33:b1:8f:91:2f:b4:39:0e:e0:37:0b:
b5:6b:7b:2b:ff:7c:fe:40:aa:0b:8d:59:50:96:6e:ee:b0:97:
b5:3a:35:41:c6:6d:c4:92:16:eb:42:75:20:ee:9f:e1:14:7e:
88:41:f4:34:a7:1a:f6:2f:ce:a8:83:6e:3e:b9:10:0d:c0:7f:
bf:1d:3e:4e:1d:85:1b:19:e9:19:07:cf:06:82:f4:62:ed:94:
48:d2:c8:91:c2:ca:0b:17:98:02:3e:d9:fb:79:35:62:b4:96:
5b:a2:11:d7:a1:06:51:e9:b8:95:4e:07:bf:72:0e:92:d8:f0:
77:88:fc:b0:a9:cb:74:17:7e:a9:78:00:9a:c4:cc:26:21:d9:
03:a5:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:39 2026 by rpki-client